Affiliation:
1. State Key Laboratory of Integrated Service Networks, Xidian University, Xi’an 710071, China
Abstract
The Domain Name System (DNS) is a fundamental component of the internet, responsible for resolving domain names into IP addresses. DNS servers are typically categorized into four types: recursive resolvers, root name servers, Top-Level Domain (TLD) name servers, and authoritative name servers. The latter three types of servers store actual records, while recursive resolvers do not store any real data and are only responsible for querying the other three types of servers and responding to clients. Recursive resolvers typically maintain a caching system to speed up response times, but these caching systems have the drawbacks of a low real-time performance, a poor accuracy, and many security and privacy issues. In this paper, we propose a caching system based on a consortium blockchain, namely DNS-BC, which uses the synchronization mechanism of the consortium blockchain to achieve a high real-time performance, uses the immutable mechanism of the consortium blockchain and our designed credibility management system to achieve up to a 100% accuracy, and has been combined with encrypted transmission protocols to solve common security and privacy issues. At the same time, this caching system can greatly reduce the traffic that name servers need to handle, thereby protecting them from Denial-of-Service (DoS) attacks. To further accelerate the data transmission speed, we have designed a new encrypted DNS protocol called DNS over KCP (DoK). The DoK protocol is based on the KCP protocol, which is a fast and reliable transmission protocol, and its latency can reach one-third of that of TCP when the network environment deteriorates. In our experiments, the transmission time of this protocol is about a quarter of that of the widely used encrypted protocols DNS over TLS (DoT) and DNS over HTTPS (DoH).
Funder
Natural Science Basic Research Plan in Shaanxi Province of China
Subject
Electrical and Electronic Engineering,Biochemistry,Instrumentation,Atomic and Molecular Physics, and Optics,Analytical Chemistry
Reference29 articles.
1. Challenges in securing the domain name system;Chandramouli;IEEE Secur. Priv.,2006
2. Load Distributed and Benign-Bot Mitigation Methods for IoT DNS Flood Attacks;Mahjabin;IEEE Internet Things J.,2020
3. Rajendran, B., and Shetty D., P. (2020, January 26–28). DNS Amplification & DNS Tunneling Attacks Simulation, Detection and Mitigation Approaches. Proceedings of the International Conference on Inventive Computation Technologies (ICICT), Coimbatore, India.
4. Dissanayake, I.M.M. (2018, January 2–4). DNS Cache Poisoning: A Review on its Technique and Countermeasures. Proceedings of the National Information Technology Conference (NITC), Colombo, Sri Lanka.
5. Jin, Y., Tomoishi, M., and Matsuura, S. (2019, January 9–12). Detection of Hijacked Authoritative DNS Servers by Name Resolution Traffic Classification. Proceedings of the IEEE International Conference on Big Data (Big Data), Los Angeles, CA, USA.
Cited by
2 articles.
订阅此论文施引文献
订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献
1. Analyzing and Developing the Security of DNS-Based Authentication in Wireless Sensor Network;2023 3rd International Conference on Smart Generation Computing, Communication and Networking (SMART GENCON);2023-12-29
2. NPC: Network Packet Classification Using Machine Learning Methodologies for Preventing Cyberattacks;2023 International Conference on Research Methodologies in Knowledge Management, Artificial Intelligence and Telecommunication Engineering (RMKMATE);2023-11-01